Define contents permissions on "dependabot validate" workflow (#5874)

jaegertracing · Aug 22, 2024 · 8f2543c · 8f2543c
1 parent 49114db
commit 8f2543c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/ci-lint-dependabot-config.yml b/.github/workflows/ci-lint-dependabot-config.yml
@@ -5,6 +5,11 @@ on:
     paths:
       - '.github/dependabot.yml'
       - '.github/workflows/validate-dependabot-config.yml'
+
+# See https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest